Plain-language summary first
Privacy notice
We collect what is needed to enroll you, invoice you and issue certificates, and we measure how the website is used so that we can improve it. We do not sell personal data. The one advertising cookie is the Meta Pixel.
Who is responsible for your data
The data controller is our operating company, which sells and invoices the Institute’s courses. Contact: the academy office.
What we collect
- When you request a confirmation link: your full name as it should appear on your certificates, your email address, your mobile number (optional for free courses), billing country, optional organization, and the courses you chose. The name, email address and mobile number form your academic record: we use them to issue certificates and to link your account and exam results to you. Before a proctored exam, we may ask you to verify your identity.
- When you confirm an order: the version of the terms you accepted, the time, and the network details your browser sends (IP address, browser identification and the approximate country, city and network provider derived from the IP address). This is our record that you accepted the terms.
- When you study: assessment submissions and results, so that certificates can be issued and verified.
Your enrollment list before checkout is stored only in your own browser.
Signing in to your courses
The course room needs no password. When you ask to sign in, we email a link that works once, for 15 minutes. Opening it sets one cookie that keeps you signed in for 30 days. The cookie holds a random number and nothing else, and we store only a scrambled copy of that number. Signing out ends the session at once.
How we measure use of the website
The website runs our own first-party analytics. It sets no cookies. It keeps a random visitor number in your browser’s local storage, and a session number in session storage, so that visits from the same browser can be counted together. With each page view it records the page, the referring page, campaign tags in the link, the time spent, the screen size, the time zone and the approximate location derived from the IP address.
It also makes a session recording: a record of page changes, clicks, scrolling and mouse movement, from which a visit can be replayed. Everything typed into a form field is masked in the recording, so the recording never holds what you type. Session recordings are deleted after 90 days.
We use this to see which pages are read, where visitors leave and what fails, and to recognize automated traffic. This is our legitimate interest in running and improving the website. You can clear the stored numbers at any time by clearing your browser’s site data, and you may object by writing to us.
Google Analytics and the Meta Pixel
The website also loads Google Analytics, which counts page views and the steps of an enrollment, such as viewing a course or starting checkout.
It also loads the Meta Pixel, a small script from Meta, the company behind Facebook and Instagram. It tells Meta which of our pages your browser viewed, so that we can show our posts and offers to past visitors on Facebook and Instagram and measure those ads. Meta may link this to a Facebook or Instagram account you are signed in to. You can turn off ads based on your visits in your Facebook or Instagram ad settings, or by clearing this site’s data in your browser.
Our LinkedIn publishing tool
Our team publishes the Institute’s posts with an in-house tool that connects to our own LinkedIn profile and our own LinkedIn Page. When one of us connects, LinkedIn gives the tool an access token and the connected profile’s or Page’s name and photo. The tool uses them only to publish posts a person on our team approved and to read the numbers of our own posts: impressions, members reached, reactions, comments, reshares, saves, sends, link clicks, profile views and followers gained. Post numbers are deleted after at most 48 hours. The tool does not read comments, commenters or any other LinkedIn member’s profile data. We do not sell or share LinkedIn data, and we do not use it for advertising, sales or recruiting.
Why we use it
To make and invoice the enrollment (performing the contract), to keep accounting records (legal obligation), to issue and verify certificates (performing the contract and, for verification, our legitimate interest in preventing fraud), and to answer your questions.
Who processes it for us
- Cloudflare, which hosts the website, the order database and the analytics records.
- Resend, which delivers the confirmation and invoice emails.
- Google, for Google Analytics, and Meta, for the Meta Pixel.
Cloudflare and Resend act on our instructions. Data may be processed outside your country under standard contractual safeguards.
How long we keep it
Orders and invoices: as long as accounting law requires, currently seven years. Certificate records: for as long as the certificate can be verified. Unconfirmed requests: deleted after 90 days.
Your rights
You may ask for a copy of your data, its correction or deletion, or object to its use, by writing to the academy office. You may also complain to your data protection authority.